$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: /ziBLg4F70zhfxN9g29GR7MAvpUcBJ6sFlH1oIHsoEE= Subject key identifier: DF:C9:BF:7E:58:46:B8:58:67:38:76:01:D8:CF:C4:91:93:13:59:C1 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 1B9E47825B8BE2EC32B45793214EA7AEE1842291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01AD Signing time: Fri 11 Apr 2025 15:51:12 +0000 Manifest this update: Fri 11 Apr 2025 15:46:12 +0000 Manifest next update: Tue 15 Apr 2025 02:33:12 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: S+NQ3dnilDt2t9/bNurTwnNavRHGFYIwchjwOYMoTTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 02:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9e:47:82:5b:8b:e2:ec:32:b4:57:93:21:4e:a7:ae:e1:84:22:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Apr 11 15:46:12 2025 GMT Not After : Apr 15 02:33:12 2025 GMT Subject: CN=DFC9BF7E5846B85867387601D8CFC491931359C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:75:b6:f5:59:2f:db:a8:c7:10:82:e6:ba: 70:93:c0:65:a7:75:3f:69:fc:98:d4:2b:39:9b:f0: a6:45:45:db:95:2b:54:16:06:af:c2:7e:86:e9:42: e2:d9:27:11:dc:54:43:82:6e:30:9d:52:08:bc:df: 01:49:a6:ae:66:ca:36:a8:e9:f6:34:d3:56:a4:6c: 7c:df:22:91:55:3b:47:e5:e3:53:a9:ea:f0:62:69: 83:86:8e:90:ae:eb:8b:de:55:4e:76:87:62:0d:7b: 37:51:b4:97:54:ea:e6:a1:63:22:2b:b0:aa:c3:9b: d8:f0:9b:f0:17:8a:19:7e:bc:e3:50:19:e0:f1:36: 08:44:b4:a9:02:3f:6b:34:a0:0d:ce:da:9b:c2:10: 3f:c8:46:8d:e1:ae:4f:32:a4:c3:84:95:1b:79:03: 96:19:76:51:7e:dd:5a:e1:ad:51:82:5b:11:15:bd: 35:b5:bd:7c:bf:da:fa:2b:ce:8c:63:6a:10:fc:9e: b7:9e:de:62:1c:73:f2:53:4d:d7:b5:fe:ba:31:0f: f7:25:3d:41:15:2a:39:f6:75:6a:c5:a8:49:88:06: 48:46:c0:a5:80:49:03:35:f0:99:85:29:13:53:64: f8:e9:9f:16:b8:b6:89:76:f3:c1:53:0c:99:bc:1e: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C9:BF:7E:58:46:B8:58:67:38:76:01:D8:CF:C4:91:93:13:59:C1 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9b:fa:2d:15:b4:b0:17:61:c8:f5:2d:ee:91:6d:45:3a:d5: 38:76:30:27:32:32:23:c7:f6:10:fe:90:59:76:cd:e5:46:7a: a7:41:4e:1a:0f:df:82:16:3b:d3:5b:a0:22:d2:b3:d9:2a:01: 70:76:f7:62:18:f9:f9:34:27:5f:2a:e4:2a:e2:0d:93:e8:5f: 66:c7:69:6b:02:af:b3:2d:7d:a9:d7:c3:07:6f:68:6b:b8:d8: 97:cb:18:75:77:51:c0:3a:5e:db:53:fb:e6:41:f8:7a:72:6d: 5e:7f:a6:6b:f2:03:7c:f9:8c:e8:2f:08:86:88:75:62:46:b9: 18:f7:24:d0:19:1e:6c:e6:6a:8a:0c:97:e1:f9:00:27:ea:5a: f5:f9:6f:17:2e:6e:6a:45:95:88:a4:40:af:03:8a:f8:77:41: 6b:3c:76:c3:4a:aa:19:17:cd:c0:c7:32:50:d7:c6:e4:51:70: 01:80:7a:3a:c0:6b:92:2b:19:e0:3f:cb:d3:7b:1c:00:61:a7: 58:dd:71:72:54:8d:3a:79:e7:2d:89:37:77:51:a9:3e:5c:02: 0a:06:dc:ce:15:cb:d4:e1:51:c0:1d:11:21:8a:57:cf:03:eb: e3:1b:e5:88:7d:90:bf:05:8a:f5:64:b8:64:7e:9c:3c:35:04: e5:ec:f5:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG55HgluL4uwytFeTIU6nruGEIpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA0MTExNTQ2MTJaFw0yNTA0MTUwMjMzMTJaMDMxMTAvBgNV BAMTKERGQzlCRjdFNTg0NkI4NTg2NzM4NzYwMUQ4Q0ZDNDkxOTMxMzU5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsHW29Vkv26jHEILmunCTwGWn dT9p/JjUKzmb8KZFRduVK1QWBq/CfobpQuLZJxHcVEOCbjCdUgi83wFJpq5myjao 6fY001akbHzfIpFVO0fl41Op6vBiaYOGjpCu64veVU52h2INezdRtJdU6uahYyIr sKrDm9jwm/AXihl+vONQGeDxNghEtKkCP2s0oA3O2pvCED/IRo3hrk8ypMOElRt5 A5YZdlF+3VrhrVGCWxEVvTW1vXy/2vorzoxjahD8nree3mIcc/JTTde1/roxD/cl PUEVKjn2dWrFqEmIBkhGwKWASQM18JmFKRNTZPjpnxa4tol288FTDJm8HtfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38m/flhGuFhnOHYB2M/EkZMTWcEwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6b+i0VtLAXYcj1Le6RbUU61Th2MCcyMiPH 9hD+kFl2zeVGeqdBThoP34IWO9NboCLSs9kqAXB292IY+fk0J18q5CriDZPoX2bH aWsCr7MtfanXwwdvaGu42JfLGHV3UcA6XttT++ZB+HpybV5/pmvyA3z5jOgvCIaI dWJGuRj3JNAZHmzmaooMl+H5ACfqWvX5bxcubmpFlYikQK8Divh3QWs8dsNKqhkX zcDHMlDXxuRRcAGAejrAa5IrGeA/y9N7HABhp1jdcXJUjTp55y2JN3dRqT5cAgoG 3M4Vy9ThUcAdESGKV88D6+Mb5Yh9kL8FivVkuGR+nDw1BOXs9SA= -----END CERTIFICATE-----Generated at Sat Apr 12 19:19:34 2025 by rpki-client